Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-27015 Details

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in the flow table lookup, so pppoe packets enter the classical forwarding path.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/4ed82dd368ad883dc4284292937b882f044e625d kernel.orgPatch
https://git.kernel.org/stable/c/6db5dc7b351b9569940cd1cf445e237c42cd6d27 kernel.orgPatch
https://git.kernel.org/stable/c/e3f078103421642fcd5f05c5e70777feb10f000d kernel.orgPatch
https://git.kernel.org/stable/c/e719b52d0c56989b0f3475a03a6d64f182c85b56 kernel.orgPatch
https://git.kernel.org/stable/c/f1c3c61701a0b12f4906152c1626a5de580ea3d2 kernel.orgPatch

see all 13 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.13, < 5.15.157
>= 5.16, < 6.1.88
>= 6.2, < 6.6.29
>= 6.7, < 6.8.8
6.9 rc1

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*

Remediation

  • No remediation found in references.
fedoraproject fedora
38
39
40

CPE

  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

10 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-27015
NVD Published Date:
May 1, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2024-27015 Details - Not Deferred